Data Protection Notice (KVKK)

Last updated: 21 October 2026

1. Data Controller

This website (oncuconsultancy.com) is operated by Öncü Consultancy (the "data controller"). Your personal data is processed as described below, as the data controller under Turkey's Law No. 6698 on the Protection of Personal Data ("KVKK").

2. Personal Data Processed

When you contact us or complete the check-up through our site, the following data may be processed:

• Identity information: first and last name
• Contact information: phone number, email address
• Business information: business/brand name, city, restaurant/café type, number of branches
• Content of your request: free-text information you share in the contact form or check-up
• Check-up answers and the performance scores calculated from them

3. Purpose of Processing Personal Data

Your personal data is processed to evaluate your request, contact you, deliver your check-up result and any detailed report you request, promote our consulting services, and fulfill our legal obligations.

4. Method and Legal Basis of Data Collection

Your personal data is collected electronically through our contact form and check-up form, based on the legal grounds of "explicit consent of the data subject" and "being directly related to the establishment or performance of a contract," as set out in Article 5 of the KVKK.

5. Transfer of Personal Data

Your personal data is not shared with third parties except where legally required. It may be shared, to the extent limited to technical infrastructure needs, with our server/hosting providers necessary to deliver the service.

6. Retention Period

Your personal data is retained for as long as required by the purpose of processing and any applicable statutory limitation periods; it is then deleted, destroyed or anonymized.

7. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed
• Request information about it if it has been processed
• Learn the purpose of processing and whether it is used consistently with that purpose
• Know the third parties to whom it is transferred, domestically or abroad
• Request correction if it has been processed incompletely or incorrectly
• Request its deletion or destruction within the conditions set out in the KVKK
• Request that these actions be notified to third parties to whom the data was transferred
• Object to a result that is to your detriment arising solely from analysis of the data by automated systems
• Request compensation for damages arising from unlawful processing

8. How to Apply

To exercise the rights above, you may submit your request through the form on our contact page or the email address listed on the site.